Privacy Policy
Who we are
Owed, Inc. (“Owed,” “we”) operates owedagent.com and the Owed application. Contact: hello@owedagent.com.
Google API Services User Data Policy — Limited Use
The use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, Gmail data is used only to provide the user-facing money-recovery features you request:
- We do not use Gmail data to train or improve generalized AI/ML models.
- We do not sell or transfer Gmail data to third parties, including advertising platforms or data brokers.
- We do not use Gmail data for serving advertisements.
- Human access to Gmail content is prohibited except with your explicit per-ticket consent for support, for security investigations, or when required by law — and is logged.
- LLM processing of email content, when used, is a user-facing feature and is sent only to providers under zero-retention / no-training terms.
What we collect
- Account data: email, password hash, legal name, US state of residence, consents.
- Mailbox connection tokens, stored encrypted; access tokens are short-lived.
- Extracted structured fields from commercial email (merchant, amounts, dates, order ids) plus minimal evidence excerpts. Full raw MIME bodies are not stored long-term (candidate cache ≤ 30 days).
- Claim approval records (what you approved, when, IP, user-agent) and billing records.
What we do not do
- We do not sell or share personal information for advertising. “Do not sell/share” is honored.
- We do not take custody of recovered funds.
- We do not use mailbox data to train models.
- We do not read credit reports or scores.
Retention and deletion
You may disconnect a mailbox and request deletion of all mailbox-derived data. We target completion within 72 hours (no later than 30 days). Billing records and claim-approval audit records are retained as required; they do not contain mailbox bodies. Global Privacy Control (GPC) signals on this marketing site suppress analytics.
Your rights
Depending on your state, you may request access, correction, or deletion. Email hello@owedagent.com. California residents: we do not sell or share personal information as those terms are used in the CCPA.
Subprocessors
Cloud hosting, email delivery, payments (Stripe), and a zero-retention LLM provider. A current list lives on the Security page. Each vendor is under a DPA where required.